Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e952d3ee-a0a6-3775-a53a-36a4cabf09bf.roa
File:                     e952d3ee-a0a6-3775-a53a-36a4cabf09bf.roa (raw, json)
Hash identifier:          sjqgKzP3tyvzWHV2woV46TcVR6AWYby03Q6b/cKyS3U=
Subject key identifier:   7D:D5:D8:75:FF:8C:CE:B8:5F:32:60:57:B4:DE:6A:01:12:C5:24:E0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584847E023C72AFB9980C8B630E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e952d3ee-a0a6-3775-a53a-36a4cabf09bf.roa
Signing time:             Sat 21 Dec 2024 14:00:52 +0000
ROA not before:           Sat 21 Dec 2024 14:00:52 +0000
ROA not after:            Fri 21 Mar 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        136.124.0.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:47:e0:23:c7:2a:fb:99:80:c8:b6:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 21 14:00:52 2024 GMT
            Not After : Mar 21 13:00:52 2025 GMT
        Subject: CN=9e3defda-e2c3-4f03-9de1-c22f3d7dd612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:85:a3:5c:1b:4a:2e:44:de:92:f9:1f:7d:
                    05:42:1a:be:1e:bf:96:86:d1:be:69:3a:eb:1a:c6:
                    38:08:08:26:f1:4d:22:61:2f:79:c0:8f:a7:2c:64:
                    27:76:d5:05:b3:5b:46:6c:d2:ee:01:4e:c4:99:d2:
                    6c:44:29:49:b7:ef:52:97:64:b1:f1:ad:bc:a0:af:
                    2e:21:0a:f5:b5:2c:39:3f:cd:60:2b:b0:53:82:63:
                    42:bf:d0:b9:c4:62:86:03:b8:a5:5a:16:f0:dc:c4:
                    82:fe:57:52:16:3f:d7:04:f4:46:9b:74:46:c8:7e:
                    2e:6d:33:1e:cb:86:18:7b:ec:d8:80:c8:76:2d:8f:
                    49:0c:85:a3:69:83:74:51:f6:a3:66:c6:19:1c:3c:
                    77:7c:13:5d:a5:a0:88:46:42:64:b5:57:95:99:ea:
                    f4:29:4d:10:fd:15:22:d3:b5:e2:23:df:b2:1a:ed:
                    0c:7f:ac:7a:48:5f:bd:69:8c:02:a7:21:d7:23:1b:
                    fb:04:ac:81:d3:08:09:3f:72:9a:4e:bf:ca:d9:88:
                    16:de:fe:43:55:bd:c7:e3:90:f8:72:b9:4c:85:9e:
                    fa:bb:cb:89:70:ab:b5:76:85:a4:f1:a2:6b:3d:f6:
                    27:bc:77:d3:5e:a8:83:88:f5:7b:29:97:74:0f:9e:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:D8:75:FF:8C:CE:B8:5F:32:60:57:B4:DE:6A:01:12:C5:24:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e952d3ee-a0a6-3775-a53a-36a4cabf09bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.124.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:b3:b7:53:66:8c:dc:a6:32:5e:8f:85:88:81:f4:eb:72:
         ee:e1:01:16:66:0d:69:f7:82:32:01:74:16:ca:d0:54:9a:15:
         45:93:af:55:56:78:37:e7:9c:a1:02:4e:49:86:09:f6:56:04:
         09:83:90:40:38:3e:d4:07:ca:11:a6:5a:75:58:37:8b:03:6e:
         8f:ab:ef:6e:1b:c2:61:47:38:b3:b8:84:92:b3:4b:46:34:6e:
         7e:5c:f7:8f:21:5f:21:72:b0:4e:c9:48:70:48:0c:2c:a6:92:
         3f:c7:af:c9:e2:52:5f:b0:6f:c3:9c:a3:6b:56:f5:f6:81:60:
         2b:df:69:09:47:e4:22:8f:5c:2e:b4:9a:39:12:60:ab:f9:7b:
         38:b4:37:de:54:26:a2:6d:29:bb:ef:b6:cc:e2:1e:29:68:5e:
         55:4f:5b:70:60:71:84:21:2e:93:fb:7c:f7:be:c2:a8:43:dd:
         52:fe:00:26:4c:0a:ff:37:1d:13:ee:90:f2:fa:2a:cb:b5:b6:
         7f:d7:ed:50:23:9b:82:ab:43:65:a5:82:bd:a4:d5:be:72:36:
         c4:1c:6a:72:07:1e:f9:3a:71:6d:23:e5:4f:5b:86:47:d0:f2:
         44:01:0b:fd:8e:8f:a5:a9:50:46:94:3f:e0:0b:07:af:c7:8c:
         ce:2d:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:48 2025 by rpki-client